Sr. Security Engineer, Product Security

About Xerox Holdings Corporation

For more than 100 years, Xerox has continually redefined the workplace experience. Harnessing our leadership position in office and production print technology, we’ve expanded into software and services to sustainably power today’s workforce. From the office to industrial environments, our differentiated business solutions and financial services are designed to make every day work better for clients — no matter where that work is being done. Today, Xerox scientists and engineers are continuing our legacy of innovation with disruptive technologies in digital transformation, augmented reality, robotic process automation, additive manufacturing, Industrial Internet of Things and cleantech. Learn more at www.xerox.com and explore our commitment to diversity and inclusion.

Summary:

This position is part of the Xerox Cyber Security team that is responsible for driving security of Xerox digital platforms. The qualified candidate will provide technical leadership to a multidisciplinary product security team that is responsible for securing enterprise systems, applications, and products across a broad spectrum of technologies. The candidate must demonstrate a passion for application security and lead by example that fosters continued growth and technical expertise within the team.

Responsibilities include, but are not limited to:

• Assess applications and products for security vulnerabilities and design flaws
• Implement secure SDLC processes through effective collaboration
• Manual and Automated Secure Code Review
• Development of security automation tools
• Develop and maintain secure coding practices and security engineering standards for the development team
• Perform threat modelling, security design reviews of application or products and define security requirements as part of SDLC process
• Security training for internal development teams
• Track and report on product security metrics and communicate the security posture of products to stakeholders.
• Research, analyze and report on security industry trends and products
• Serve as a security evangelist for executive management and business stakeholders.